$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft File: zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json) Hash identifier: m+PaYyPdWBLsX0SCZeseP6ZiZACt4HhEqB99fFvwM50= Subject key identifier: 3D:25:06:96:AD:92:F3:48:03:A8:E2:70:2F:D8:5F:B1:12:36:9C:0E Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft Manifest number: 14 Signing time: Wed 13 May 2026 08:36:03 +0000 Manifest this update: Wed 13 May 2026 08:36:02 +0000 Manifest next update: Wed 20 May 2026 08:36:02 +0000 Files and hashes: 1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: NhMZEjYdEaCKnjxh0qedjNkw6pWNPFv/TU/P+wBSzAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Validity Not Before: May 13 08:36:02 2026 GMT Not After : May 20 08:36:02 2026 GMT Subject: CN=6a0437f3-ff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:4e:84:7c:2e:c9:80:99:25:8a:79:fd:db: 19:ad:97:6c:11:26:9e:e4:52:09:14:28:2d:73:5c: 1c:a4:6d:05:79:36:03:52:7c:c4:3d:25:46:b4:d6: e5:af:70:7e:84:eb:e3:c7:67:67:2d:1a:46:c1:ff: c8:ce:a4:cf:9c:af:41:20:c5:10:d6:2d:a7:ed:49: 50:24:89:8b:51:a5:7b:91:cb:8d:d2:cc:79:43:03: b7:80:19:58:b1:09:69:9f:7c:64:82:c7:b3:c2:1b: 2d:60:5b:bd:1d:0e:59:a3:fc:c9:fc:40:3d:81:9a: 7d:49:06:4a:ec:89:a2:95:61:c8:55:12:26:62:3a: a0:0f:70:ce:61:9c:be:9f:45:f0:f1:ab:ae:e2:6c: 6e:49:5f:b2:d9:1b:f1:1a:ee:b0:10:73:34:5c:b2: 70:db:7b:73:c3:83:83:87:cf:50:45:aa:2a:5a:a6: 6c:30:e1:d5:f7:26:7d:bd:7c:24:af:7d:85:75:10: 8b:f0:7b:b6:8f:a2:67:d5:74:07:3d:23:aa:03:11: 89:10:24:8a:fe:e6:21:8b:f1:9b:44:c7:c8:b0:f3: 83:63:bc:28:96:71:35:3e:a1:13:6b:3d:b0:7b:f8: a6:53:12:c6:63:fa:30:82:4f:a7:3b:42:00:6f:73: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:06:96:AD:92:F3:48:03:A8:E2:70:2F:D8:5F:B1:12:36:9C:0E X509v3 Authority Key Identifier: keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:30:0c:9d:e2:b2:19:f2:e1:ac:0b:2e:d0:59:30:a1:3a: 77:44:5e:9c:c7:d9:31:81:79:76:66:e3:98:20:9e:46:f0:ed: ce:bc:c3:83:6d:6d:7f:c4:6d:f7:49:4e:a0:c0:08:fb:79:ae: 8f:28:ab:3e:69:cd:e4:09:cc:45:45:81:ad:3a:bc:40:38:7b: 96:53:ae:05:73:d5:e0:3e:82:d2:ab:fb:4d:28:c9:0b:f1:5c: 8f:41:ae:d3:5f:d2:a3:ec:2c:47:ee:12:f2:50:7c:fd:eb:74: 55:2a:1d:e6:a0:28:bc:61:1c:c9:b5:0a:03:0b:44:42:af:4e: 70:9e:d4:5a:ae:ac:de:60:c3:44:c7:d7:e3:d1:1d:9b:a7:2e: 06:9e:37:ec:78:76:00:16:20:fb:1b:17:a0:5c:b7:4e:8b:3c: 1b:b3:21:d7:7e:ee:64:c7:45:94:b9:f5:a5:72:62:6f:86:ff: 8e:e3:ca:e5:23:8c:5d:d7:0b:e2:a6:bc:ce:fa:55:39:8f:d3: f5:47:9c:1d:d5:09:a1:fb:b8:6e:3d:16:94:d0:ad:ba:21:c5: 79:e5:46:0f:41:53:44:52:16:18:31:32:fb:ed:e5:b7:23:85: 76:69:97:cd:0a:ee:b9:65:c0:15:85:22:e0:23:25:d5:c0:5c: e6:bf:2d:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjM1ODExMC8GA1UEBRMoQ0RDMTMxODUwQTI1RjBDQ0RGQzlCOUI5Q0M4RUU2NEMz QUZBNkQwODAeFw0yNjA1MTMwODM2MDJaFw0yNjA1MjAwODM2MDJaMBgxFjAUBgNV BAMTDTZhMDQzN2YzLWZmOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgn06EfC7JgJklinn92xmtl2wRJp7kUgkUKC1zXBykbQV5NgNSfMQ9JUa01uWv cH6E6+PHZ2ctGkbB/8jOpM+cr0EgxRDWLaftSVAkiYtRpXuRy43SzHlDA7eAGVix CWmffGSCx7PCGy1gW70dDlmj/Mn8QD2Bmn1JBkrsiaKVYchVEiZiOqAPcM5hnL6f RfDxq67ibG5JX7LZG/Ea7rAQczRcsnDbe3PDg4OHz1BFqipapmww4dX3Jn29fCSv fYV1EIvwe7aPomfVdAc9I6oDEYkQJIr+5iGL8ZtEx8iw84NjvCiWcTU+oRNrPbB7 +KZTEsZj+jCCT6c7QgBvczpfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPSUGlq2S 80gDqOJwL9hfsRI2nA4wHwYDVR0jBBgwFoAUzcExhQol8Mzfybm5zI7mTDr6bQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0M4RkQ4MDA0MzhB MjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16ZnlibTV6STdtVERyNmJR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNFeGhRb2w4TXpmeWJtNXpJN21URHI2YlFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC MzU4L0M4RkQ4MDA0MzhBMjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16 ZnlibTV6STdtVERyNmJRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdmjAMneKyGfLhrAsu0FkwoTp3RF6cx9kxgXl2ZuOYIJ5G8O3OvMODbW1/xG33 SU6gwAj7ea6PKKs+ac3kCcxFRYGtOrxAOHuWU64Fc9XgPoLSq/tNKMkL8VyPQa7T X9Kj7CxH7hLyUHz963RVKh3moCi8YRzJtQoDC0RCr05wntRarqzeYMNEx9fj0R2b py4GnjfseHYAFiD7GxegXLdOizwbsyHXfu5kx0WUufWlcmJvhv+O48rlI4xd1wvi przO+lU5j9P1R5wd1Qmh+7huPRaU0K26IcV55UYPQVNEUhYYMTL77eW3I4V2aZfN Cu65ZcAVhSLgIyXVwFzmvy13 -----END CERTIFICATE-----Generated at Wed May 13 14:16:52 2026 by rpki-client